Re: [users] Re: [users@httpd] CAC Card Authentication

2014-06-02 Thread Steven Siebert
What version of OpenSSL are you running? I normally wouldn't be concerned about a bug in an older version of OpenSSL...but I can fathom people downgrading to pre-heartbleed versions to be sure its safe. [Sun Jun 01 20:42:26 2014] [error] Certificate Verification: Error (20): unable to get

[users] Re: [users@httpd] CAC Card Authentication

2014-06-02 Thread Tom Browder
On Fri, May 30, 2014 at 1:06 AM, Jason Pyeron jpye...@pdinc.us wrote: -Original Message- From: McGregor, Donald (Don) (CIV) ... I'm attempting to get CAC card authentication working with Apache httpd-2.2.3-85 on Centos 5. CAC cards are the DoD ... And if you are working on an

Re: [users@httpd] CAC Card Authentication

2014-06-01 Thread McGregor, Donald (Don) (CIV)
What’s the incantation for doing debugging on the client certs from a smart card in curl? The google hits seem to be outdated. On May 29, 2014, at 11:06 PM, Jason Pyeron jpye...@pdinc.usmailto:jpye...@pdinc.us wrote: -Original Message- From: McGregor, Donald (Don) (CIV) Sent: Friday,

Re: [users@httpd] CAC Card Authentication

2014-06-01 Thread Steven Siebert
On Fri, May 30, 2014 at 12:00 AM, McGregor, Donald (Don) (CIV) mcgr...@nps.edu wrote: ERR_SSL_P Can you provide the (sanitized) apache error_log when you try mutual auth? S

[users] Re: [users@httpd] CAC Card Authentication

2014-06-01 Thread McGregor, Donald (Don) (CIV)
On Jun 1, 2014, at 6:18 AM, Steven Siebert smsi...@gmail.commailto:smsi...@gmail.com wrote: On Fri, May 30, 2014 at 12:00 AM, McGregor, Donald (Don) (CIV) mcgr...@nps.edumailto:mcgr...@nps.edu wrote: ERR_SSL_P Can you provide the (sanitized) apache error_log when you try mutual auth? S

RE: [users@httpd] CAC Card Authentication

2014-05-30 Thread Jason Pyeron
-Original Message- From: McGregor, Donald (Don) (CIV) Sent: Friday, May 30, 2014 0:01 I'm attempting to get CAC card authentication working with Apache httpd-2.2.3-85 on Centos 5. CAC cards are the DoD Here is what I tell my employees and contractors to do first. Get is working